tls: improve cli state reporting